Lucene search

K
osvGoogleOSV:DSA-1773-1
HistoryApr 17, 2009 - 12:00 a.m.

cups cupsys - arbitrary code execution

2009-04-1700:00:00
Google
osv.dev
4

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

It was discovered that the imagetops filter in cups, the Common UNIX
Printing System, is prone to an integer overflow when reading malicious
TIFF images.

For the oldstable distribution (etch), this problem has been fixed in
version 1.2.7-4etch7.

For the stable distribution (lenny), this problem has been fixed in
version 1.3.8-1lenny5.

For the testing distribution (squeeze) and the unstable distribution
(sid), this problem will be fixed soon.

We recommend that you upgrade your cups packages.

CPENameOperatorVersion
cupseq1.3.8-1lenny4.1

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P